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DETAILED ACTION 
Rejections 

1 . The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

C/a/7n Rejections - 35 USC § 103 

2. Claims 1. 3-18, 20-34. and 36-39 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Boozer et al. (U.S. Patent Pub. 2004/0205355 A1 ) in view of Tinaev 
(U.S. Patent Pub. No. 2004/0133583). 

Regarding claims 1.18. and 34 , Boozer et al. teaches a 
method/system/computer readable medium for providing Resource-Event-Agent (REA) 
model based security, the method/system/computer readable medium comprising: 

• Identifying an REA defined association of a type which dictates ownership 
between a first object and a second object (page 1, paragraph 0016); 

• Creating an association class for the REA defined association between the first 
object and second object, the association class defining security between the first 
object and the second object (page 1, paragraph 0018). 

Boozer et al. does not specifically teach REA models and wherein creating the 
association class object for the association between the first object and the second 
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object further comprises creating an association class object having properties defining 
security between the first object and the second object. 

Tingev teaches REA models (fig. 1), and wherein creating the association class 
object for the association between the first object and the second object further 
comprises creating an association class object having properties defining security 
between the first object and the second object (paragraph 0066). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine creating an association class object having properties, 
the properties of the association class object defining the security between the first 
object and the second object, as taught by Tingev , with the method/system/computer 
readable medium of Boozer et al. It would have been obvious for such modifications 
because objects have properties that define the attributes of the object. The attributes 
define the object and therefore define the security between the two objects. 

Regarding claims 3, 20. and 36 . the combination of Boozer et al. in view of 
Tingev teaches wherein creating the association class object further comprises creating 
one or more association class objects having properties, properties of the one or more 
association class objects defining security between a first class of objects of which the 
first object is a member and a second class of objects of which the second object is a 
member (see paragraph 0066 of Tingey). 
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Regarding claim 4 , the combination of Boozer et al. in view of Tinqev teaches 
wherein the second object is a securable object (see page 1, paragraph 0018 of Boozer 
et al., the objects may have security parents). 

Regarding claims 5 and 21 , the combination of Boozer et al. in view of Tinqev 
teaches wherein the first object is of a particular agent type, and wherein a role for a 
user is defined by the particular agent type for the first object (see page 6, paragraph 
0066 and 0076 of Boozer et al.). 

Regarding claims 6-10 and 22-26 . the combination of Boozer et al. in view of 
Tinqev teaches wherein the second object is a contract or agreement type object, a 
commitment type object, an event type object, a resource type object, and an agent 
type object (see fig. 1 of Tingey, REA model contains all of the mentioned object types). 

Regarding claims 11. 12. 27. and 28 . the combination of Boozer et al. in view of 
Tinqev teaches wherein identifying the REA defined association of the type which 
dictates ownership between the first object and the second object further comprises 
identifying an REA defined [control type/custody type] association between the first 
object and the second object (see page 1, paragraph 0016 and page 3, paragraph 0033 
of Boozer et al., control meaning 'ownership' and custody meaning 'template'). 
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Regarding claims 13 and 29 . the combination of Boozer et al. in view of Tinqev 
teaches wherein creating the REA defined association class object for the association 
between the first object and the second object further comprises creating the 
association class object in a security model (see page 1, paragraph 0016 of Boozer et 
al.). 

Regarding claims 14. 30. and 37 , the combination of Boozer et al. in view of 
Tinqev teaches wherein creating the association class object in the security model 
further comprises creating the association class object in the security model separate 
from the REA model (see fig. 19, ref. num 1200 of Boozer et al.). 

Regarding claims 15. 31. and 38 . the combination of Boozer et al. in view of 
Tingev teaches wherein creating the association class object in the security model 
further comprises creating the association class object in the security model as part of 
the REA model (see fig. 2 of Boozer et al.). 

Regarding claims 16. 32. and 39 . the combination of Boozer et al. in view of 
Tingev teaches wherein defining security between the first object and the second object 
further comprises defining permissions and rights of the first object relative to the 
second object (see page 2/3, paragraph 0029 of Boozer et al.). 
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Regarding claims 17 and 33 . the combination of Boozer et al. in view of Tingev 
teaches wherein defining permissions and rights of the first object relative to the second 
object further comprises dynamically determining the permissions and rights in a 
security policy logic module outside of the security model (see paragraph 0066 of 
Tingey). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Brandon S. Hoffman whose telephone number is 571- 
272-3863. The examiner can normally be reached on M-F 8:30 - 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-21 7-91 97 (toll-free). 
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